Description
EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API call.
References
- 84210 vdb-entry
- 20160307 ESA-2016-012: EMC Documentum xCP - User Information Disclosure Vulnerability mailing-list
- 1035197 vdb-entry